Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/6dc4015dac3d4e6bedbadb6c262ace44f38e0d7a.roa
File:                     6dc4015dac3d4e6bedbadb6c262ace44f38e0d7a.roa (raw, json)
Hash identifier:          4FjKT3gefsIhEHOhn436WDkt/p7THKhdaEr3JxCV3jI=
Subject key identifier:   08:39:2B:E6:0B:B0:61:23:5D:04:A9:95:6B:5A:04:59:45:50:87:3C
Certificate issuer:       /CN=9e6663fb5d62a6c45845d461b066de1127b3e069
Certificate serial:       24BB98
Authority key identifier: 4E:FA:DB:FA:CC:09:64:7A:58:D7:3A:CA:34:48:93:52:53:CC:0B:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e6663fb5d62a6c45845d461b066de1127b3e069.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/6dc4015dac3d4e6bedbadb6c262ace44f38e0d7a.roa
Signing time:             Tue 19 Dec 2023 15:15:31 +0000
ROA not before:           Tue 19 Dec 2023 15:15:31 +0000
ROA not after:            Fri 19 Dec 2025 15:15:31 +0000
asID:                     52436
IP address blocks:        168.181.208.0/22 maxlen: 24
                          168.196.32.0/22 maxlen: 24
                          138.97.176.0/22 maxlen: 24
                          207.248.124.0/22 maxlen: 24
                          179.42.168.0/22 maxlen: 24
                          2803:b900::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2407320 (0x24bb98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e6663fb5d62a6c45845d461b066de1127b3e069
        Validity
            Not Before: Dec 19 15:15:31 2023 GMT
            Not After : Dec 19 15:15:31 2025 GMT
        Subject: CN=6dc4015dac3d4e6bedbadb6c262ace44f38e0d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:26:dc:a6:18:2c:7d:ce:b2:7b:7c:4d:d3:fb:
                    b4:1f:c2:b5:75:ce:96:f5:11:a7:9f:6b:52:2d:9d:
                    68:15:0f:a8:80:dd:e1:fd:f2:fe:12:3c:01:71:97:
                    61:02:69:30:fc:ba:3b:9e:f5:2c:93:c8:69:58:fb:
                    db:92:94:10:a5:fc:f0:31:99:1c:55:f4:34:23:56:
                    ce:f3:83:98:21:72:07:49:c2:ae:23:79:8a:2f:90:
                    49:a1:8a:b6:60:5b:43:e7:98:e2:35:79:2f:0c:d5:
                    72:af:85:ee:22:a2:3a:5a:81:51:22:50:b6:66:a6:
                    b2:3f:5b:c9:37:ae:a7:fc:64:c4:46:f5:46:33:94:
                    3a:8e:0c:94:02:12:50:1a:21:ec:6d:df:b4:11:6e:
                    e5:57:3d:ad:9a:68:96:a9:aa:9f:e3:a1:0a:d1:0a:
                    2c:1c:45:37:eb:33:f4:ec:dd:da:51:89:bb:92:c6:
                    38:d7:5b:0a:cf:f4:7f:97:9f:dc:78:9d:15:8d:7b:
                    6e:ba:c5:de:ba:99:ef:ec:47:43:b8:8a:6e:01:92:
                    17:a6:7c:c6:71:13:a6:d8:dd:09:b2:e8:7c:f6:12:
                    62:ff:ab:70:fb:b8:af:46:21:c8:28:a8:36:c6:a4:
                    1b:2b:96:b3:c2:b2:15:34:2d:0d:c9:78:ed:35:41:
                    a7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:39:2B:E6:0B:B0:61:23:5D:04:A9:95:6B:5A:04:59:45:50:87:3C
            X509v3 Authority Key Identifier:
                keyid:4E:FA:DB:FA:CC:09:64:7A:58:D7:3A:CA:34:48:93:52:53:CC:0B:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e6663fb5d62a6c45845d461b066de1127b3e069.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/6dc4015dac3d4e6bedbadb6c262ace44f38e0d7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/9e6663fb5d62a6c45845d461b066de1127b3e069.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.176.0/22
                  168.181.208.0/22
                  168.196.32.0/22
                  179.42.168.0/22
                  207.248.124.0/22
                IPv6:
                  2803:b900::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:14:0b:34:c5:68:48:99:57:43:01:7a:0c:50:ed:a1:85:0a:
         95:b2:21:b7:bf:49:2e:60:58:46:f6:fc:b3:41:e6:f1:ca:6f:
         e8:c1:82:b2:1b:39:8a:20:4b:d5:1f:ab:7b:04:8f:b7:30:78:
         e0:a4:0b:9e:6b:b4:d3:71:f5:c5:e7:c9:9e:8a:fb:f9:c8:d5:
         5d:9d:e8:56:13:6a:cc:0e:71:8e:f1:28:0c:f8:7e:d7:7c:e3:
         e7:0c:76:f1:82:19:f0:8d:a6:1f:fa:2b:05:95:68:7b:07:4e:
         e1:42:ad:29:25:0a:6a:e8:a5:e3:29:9e:30:f4:4d:13:d8:0d:
         d1:3b:c1:c3:00:a0:37:a1:93:7b:e5:79:94:bd:3e:bc:2e:e5:
         c0:53:09:0c:c0:63:0a:cc:30:c2:91:ed:6c:45:77:b4:74:d5:
         dd:b1:21:20:b7:0e:37:3e:df:e3:68:bb:22:1c:95:d5:f2:16:
         bb:21:86:34:07:29:1c:7b:ae:4b:6d:f0:94:e6:d1:0a:a2:97:
         31:4d:1c:9e:19:2c:63:0a:7d:18:5f:29:a2:f1:39:76:15:ea:
         e7:93:04:76:64:10:37:f9:a4:71:37:1b:d5:4a:07:84:de:08:
         ad:71:66:f0:f8:5a:16:1e:d7:3f:74:54:41:c4:32:a5:f4:b5:
         e9:51:35:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----